Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .lycheeignore
Original file line number Diff line number Diff line change
Expand Up @@ -2,4 +2,6 @@ https://github.com/gemini-cli-extensions/data-cloud-ai-dev-kit/compare/
https://github.com/gemini-cli-extensions/data-cloud-ai-dev-kit
https://raw.githubusercontent.com/gemini-cli-extensions/data-cloud-ai-dev-kit/main/codex-install.sh
https://docs.cloud.google.com/data-cloud-extension/vs-code/install
https://docs.cloud.google.com/data-cloud-extension/vs-code/prompt-injection-risk
https://github.com/gemini-cli-extensions/data-agent-kit-starter-pack/compare/
data-cloud-ai-dev-kit@data-cloud-ai-dev-kit-marketplace
43 changes: 30 additions & 13 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,8 @@ Ensure you have the following installed:

## Getting Started

<!-- {x-release-please-start-version} -->
Comment thread
belluru marked this conversation as resolved.

### Installation

Choose the installation method for your preferred coding agent. Run the commands in terminal
Expand All @@ -49,7 +51,7 @@ Choose the installation method for your preferred coding agent. Run the commands

Install the extension directly from GitHub:
```bash
gemini extensions install https://github.com/gemini-cli-extensions/data-agent-kit-starter-pack --consent
gemini extensions install https://github.com/gemini-cli-extensions/data-agent-kit-starter-pack --ref 0.1.0
```
</details>

Expand All @@ -60,7 +62,7 @@ Run the `claude` command to start the agent, then follow these steps:

1. **Add the marketplace:**
```bash
/plugin marketplace add https://github.com/gemini-cli-extensions/data-agent-kit-starter-pack
/plugin marketplace add https://github.com/gemini-cli-extensions/data-agent-kit-starter-pack#0.1.0
```

2. **Install the plugin:**
Expand All @@ -76,12 +78,12 @@ Run the `claude` command to start the agent, then follow these steps:

**macOS / Linux:**
```bash
curl -sSL https://raw.githubusercontent.com/gemini-cli-extensions/data-agent-kit-starter-pack/main/codex-install.sh | bash
curl -sSL https://raw.githubusercontent.com/gemini-cli-extensions/data-agent-kit-starter-pack/0.1.0/codex-install.sh | bash
```

**Windows:**
```powershell
irm https://raw.githubusercontent.com/gemini-cli-extensions/data-agent-kit-starter-pack/main/codex-install.ps1 | iex
irm https://raw.githubusercontent.com/gemini-cli-extensions/data-agent-kit-starter-pack/0.1.0/codex-install.ps1 | iex
```

2. **Install the plugin in Codex:**
Expand Down Expand Up @@ -125,7 +127,7 @@ Edit the configuration file:
<summary><b>Claude Code</b></summary>

Edit the configuration file:
`~/.claude/plugins/cache/data-agent-kit-starter-pack-marketplace/data-agent-kit-starter-pack/<version>/.mcp.json`
`~/.claude/plugins/cache/data-agent-kit-starter-pack-marketplace/data-agent-kit-starter-pack/0.1.0/.mcp.json`
</details>

<details>
Expand All @@ -140,6 +142,8 @@ Edit the configuration file:
```
</details>

<!-- {x-release-please-end} -->

## Usage Examples

Interact with your coding agent using natural language prompts to perform complex data engineering tasks:
Expand Down Expand Up @@ -174,11 +178,24 @@ Common issues:

## Security Reminder: Agent Environment Hardening

Your agent has the power to execute tools and commands on your behalf. Protect your GCP resources by enforcing **Strict Least Privilege** across all CLIs, MCP servers and other resources available to your agents.

* Use [service accounts](https://docs.cloud.google.com/docs/authentication/use-service-account-impersonation) for accessing your cloud resources.
* Assign the service account a role with [limited permissions](https://docs.cloud.google.com/iam/docs/roles-overview).
* Prevent unwanted cross-org agent access by utilizing **Principal Access Boundaries** to scope your agent to [projects](https://docs.cloud.google.com/iam/docs/principal-access-boundary-policies#use-case-one-project) you intend the agent to access.

> [!NOTE]
> The Principal Access Boundary condition should bind the policy to the service accounts you intend to restrict.
Your agent can execute tools and commands on your behalf. Protect your Google
Cloud resources by enforcing **The Principle of Least Privilege** across all
CLIs, MCP servers and other resources available to your agents.

* **Service Accounts:** Use
[service accounts](https://docs.cloud.google.com/docs/authentication/use-service-account-impersonation)
instead of end user credentials to access Google Cloud resources.
* **Limited Permissions:** Assign roles with
[limited permissions](https://docs.cloud.google.com/iam/docs/roles-overview)
to the service account that you're using for authentication.
* **Principal Access Boundaries:** Prevent unwanted cross-org agent access by
using
[Principal Access Boundary policies](https://docs.cloud.google.com/iam/docs/principal-access-boundary-policies#use-case-one-project)
to scope your agent to projects you intend it to access.
* [Include a condition in the policy binding](https://docs.cloud.google.com/iam/docs/principal-access-boundary-policies#use-case-one-project)
to ensure that the policy only applies to the service accounts that you
intend to restrict.

You can read more
[here](https://docs.cloud.google.com/data-cloud-extension/vs-code/prompt-injection-risk)
on how to mitigate prompt injection attacks with Google Cloud MCP.
1 change: 1 addition & 0 deletions release-please-config.json
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,7 @@
"release-type": "simple",
"package-name": "data-agent-kit-starter-pack",
"extra-files": [
"README.md",
{
"type": "json",
"path": "gemini-extension.json",
Expand Down
Loading